On Friday 16 January 2009 23:10:25 Artur Skawina wrote:
> Christian Lamparter wrote:
> > On Friday 16 January 2009 10:13:07 Johannes Berg wrote:
> >> On Thu, 2009-01-15 at 21:18 -0600, Larry Finger wrote:
> >>
> >>>>> Object 0xddec18d0: >69< 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b ikkkkkkkkkkkkkkk
> >>> I too have seen real single bit changes - in my case 6b went to 6a,
> >>> and my memory is fine. I wouldn't necessarily blame your hardware.
> >> 6b to 6a is often the result of a refcounting bug that happens to unref
> >> a value _after_ it has been freed. But that doesn't explain 6b to 69,
> >> unless you happen to have _two_ refcounting bugs. Not that I necessarily
> >> think that memory is bad
> > Well, this idiotic debug patch (kref-kernel-debug-patch) could shed some light into
> > the problem who's using a freed skb.
>
> didn't trigger anything here, just the usual:
>
> BUG kmalloc-4096: Poison overwritten
> -----------------------------------------------------------------------------
>
> INFO: 0xdc8161b0-0xdc8161b0. First byte 0x6a instead of 0x6b
> INFO: Allocated in dev_alloc_skb+0x19/0x30 age=1762 cpu=0 pid=3530
> INFO: Freed in __kfree_skb+0xf/0x90 age=613 cpu=0 pid=3527
> INFO: Slab 0xc1390200 objects=7 used=5 fp=0xdc816120 flags=0x400020c2
> INFO: Object 0xdc816120 @offset=24864 fp=0xdc8140c0
>
> but no other warnings...
but the refcount-test-module.c works on your system?
It should produce something like:
[ 608.177429] RefTest
[ 608.179753] RefTest - Static
[ 608.182861] released ffff8800b767dec8
[ 608.186760] RefTest - Watermark test
[ 608.190563] ------------[ cut here ]------------
[ 608.195412] WARNING: at lib/kref.c:67 kref_put+0x56/0x72()
[ 608.201139] Hardware name: System Product Name
[ 608.205813] Modules linked in: refcount(+) [...] [last unloaded: refcount]
[ 608.288005] Pid: 8793, comm: insmod Tainted: P W 2.6.29-rc1-wl #5
[ 608.295036] Call Trace:
[ 608.297719] [<ffffffff80233389>] warn_slowpath+0xd8/0x112
[ 608.304057] [<ffffffff80233edd>] vprintk+0x28a/0x2b6
[ 608.309546] [<ffffffffa0089000>] reftst_release+0x0/0x14 [refcount]
[ 608.316241] [<ffffffffa00a5000>] reftst_init+0x0/0xd5 [refcount]
[ 608.322572] [<ffffffffa00a5000>] reftst_init+0x0/0xd5 [refcount]
[ 608.328904] [<ffffffffa0089000>] reftst_release+0x0/0x14 [refcount]
[ 608.335497] [<ffffffffa00a5000>] reftst_init+0x0/0xd5 [refcount]
[ 608.341833] [<ffffffff803b853a>] kref_put+0x56/0x72
[ 608.347034] [<ffffffffa00a5082>] reftst_init+0x82/0xd5 [refcount]
[ 608.353461] [<ffffffff80209051>] _stext+0x51/0x120
[ 608.358576] [<ffffffff803ba5b2>] __up_read+0x13/0x8d
[ 608.363862] [<ffffffff8024823d>] __blocking_notifier_call_chain+0x51/0x5f
[ 608.370980] [<ffffffff80256080>] sys_init_module+0xa0/0x1ba
[ 608.376878] [<ffffffff8020b41b>] system_call_fastpath+0x16/0x1b
[ 608.383116] ---[ end trace e0829545e9e114bf ]---
[ 608.388194] RefTest - slXb poison test
[ 608.392223] ------------[ cut here ]------------
[ 608.397066] WARNING: at lib/kref.c:67 kref_put+0x56/0x72()
[ 608.402783] Hardware name: System Product Name
[ 608.407454] Modules linked in: refcount(+) [...] ehci_hcd [last unloaded: refcount]
[ 608.488299] Pid: 8793, comm: insmod Tainted: P W 2.6.29-rc1-wl #5
[ 608.495325] Call Trace:
[ 608.498015] [<ffffffff80233389>] warn_slowpath+0xd8/0x112
[ 608.503735] [<ffffffff80233edd>] vprintk+0x28a/0x2b6
[ 608.509023] [<ffffffff80595798>] thread_return+0x3d/0xc2
[ 608.514670] [<ffffffffa0089000>] reftst_release+0x0/0x14 [refcount]
[ 608.521268] [<ffffffffa00a5000>] reftst_init+0x0/0xd5 [refcount]
[ 608.527601] [<ffffffffa00a50bd>] reftst_init+0xbd/0xd5 [refcount]
[ 608.534025] [<ffffffff8029147a>] check_object+0x156/0x205
[ 608.539751] [<ffffffff80291c89>] __slab_free+0x271/0x2a8
[ 608.545384] [<ffffffffa0089000>] reftst_release+0x0/0x14 [refcount]
[ 608.551980] [<ffffffffa00a5000>] reftst_init+0x0/0xd5 [refcount]
[ 608.558315] [<ffffffff803b853a>] kref_put+0x56/0x72
[ 608.563513] [<ffffffffa00a5000>] reftst_init+0x0/0xd5 [refcount]
[ 608.569849] [<ffffffffa00a50cc>] reftst_init+0xcc/0xd5 [refcount]
[ 608.576274] [<ffffffff80209051>] _stext+0x51/0x120
[ 608.581384] [<ffffffff803ba5b2>] __up_read+0x13/0x8d
[ 608.586671] [<ffffffff8024823d>] __blocking_notifier_call_chain+0x51/0x5f
[ 608.593789] [<ffffffff80256080>] sys_init_module+0xa0/0x1ba
[ 608.599685] [<ffffffff8020b41b>] system_call_fastpath+0x16/0x1b
[ 608.605923] ---[ end trace e0829545e9e114c0 ]---
[[[some delay - until the object is alloced by someone else]]]
[ 613.331424] =============================================================================
[ 613.335408] BUG kmalloc-96: Poison overwritten
[ 613.335408] -----------------------------------------------------------------------------
[ 613.335408]
[ 613.335408] INFO: 0xffff8800be0aa950-0xffff8800be0aa950. First byte 0x6a instead of 0x6b
[ 613.335408] INFO: Allocated in 0xffffffffa00a5093 age=1243 cpu=0 pid=8793
[ 613.335408] INFO: Freed in 0xffffffffa00a50bd age=1244 cpu=0 pid=8793
[ 613.335408] INFO: Slab 0xffffe20002992530 objects=24 used=23 fp=0xffff8800be0aa930 flags=0x40000000000000c3
[ 613.335408] INFO: Object 0xffff8800be0aa930 @offset=2352 fp=0x(null)
[ 613.335408]
[ 613.335408] Bytes b4 0xffff8800be0aa920: ec ca 00 00 01 00 00 00 5a 5a 5a 5a 5a 5a 5a 5a ��......ZZZZZZZZ
[ 613.335408] Object 0xffff8800be0aa930: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
[ 613.335408] Object 0xffff8800be0aa940: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
[ 613.335408] Object 0xffff8800be0aa950: 6a 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b jkkkkkkkkkkkkkkk
[ 613.335408] Object 0xffff8800be0aa960: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
[ 613.335408] Object 0xffff8800be0aa970: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
[ 613.335408] Object 0xffff8800be0aa980: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5 kkkkkkkkkkkkkkk�
[ 613.335408] Redzone 0xffff8800be0aa990: bb bb bb bb bb bb bb bb ��������
[ 613.473011] Padding 0xffff8800be0aa9d0: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ
[ 613.473011] Pid: 1671, comm: kcryptd Tainted: P W 2.6.29-rc1-wl #5
[ 613.473011] Call Trace:
[ 613.473011] [<ffffffff802912e8>] check_bytes_and_report+0xb5/0xf1 [no sign of refcount test in this backtrace here]
[ 613.473011] [<ffffffff8022a2d7>] update_curr+0x4a/0xcd
[ 613.473011] [<ffffffff802913ec>] check_object+0xc8/0x205
[ 613.473011] [<ffffffff80292af2>] __slab_alloc+0x3cb/0x4ba
[ 613.473011] [<ffffffff804c4b9c>] r1bio_pool_alloc+0x24/0x3d
[ 613.473011] [<ffffffff804c4b9c>] r1bio_pool_alloc+0x24/0x3d
[ 613.473011] [<ffffffff80293381>] __kmalloc+0x98/0xc1
[...]
[ 613.473011] FIX kmalloc-96: Restoring 0xffff8800be0aa950-0xffff8800be0aa950=0x6b
[ 613.473011]
[ 613.473011] FIX kmalloc-96: Marking all objects used
--
To unsubscribe from this list: send the line "unsubscribe linux-wireless" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
